Cyber Hunt Team Leader

Qualifications

• U.S. Citizenship required.

• 10+ years of cybersecurity experience, with demonstrated expertise in threat hunting, incident response, and adversary tracking.

• Remote but within close proximity to the NCR.

• Active Public Trust 6c clearance, or the ability to obtain and maintain one.

• At least one of the following certifications: CISSP, GCIH, GCFA, or CEH.

• Hands-on experience with EDR/NDR platforms, SIEM tools, MITRE ATT&CK framework, and threat emulation methodologies.

• Strong understanding of operating systems, networking, and adversary tactics, techniques, and procedures (TTPs).

• Experience leading threat hunting teams within a Security Operations Center (SOC) environment.

• Proven ability to develop threat hypotheses and translate complex technical findings into clear, actionable intelligence for both technical teams and executive audiences.

• Excellent written and verbal communication skills, with a track record of producing high-quality federal security documentation.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field or equivalent professional experience.

• One of the following certifications:

• Certified Information Security Manager (CISM)

• GIAC Cyber Threat Intelligence (GCTI)

• GIAC Cloud Threat Detection (GCTD)

• MITRE ATT&CK Defender (MAD)

• Familiarity with federal cybersecurity frameworks including NIST RMF, NIST SP 800-53, and FedRAMP compliance requirements.

• Experience supporting continuous monitoring programs and coordinating with SOC teams on POA&M remediation tracking.

• Prior experience working on large-scale federal civilian agency programs with complex, multi-stakeholder environments.

• Experience conducting or supporting ICS/OT and cloud-based threat hunting operations.

• Familiarity with cyber threat intelligence platforms and the structured analysis of threat actor campaigns.

• Ability to provide strategic guidance that enhances and optimizes an agency's overall cybersecurity posture.

• Experience with DevSecOps pipelines, vulnerability management tools, and cloud-native security technologies.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!